Configuring ACL Configuration Example for ACL
User Guide    627
Switch(config)#access-list ip 500 rule 5 permit logging disable sip 10.10.70.0 sip-amask 
255.255.255.0 protocol 17 d-port 53  d-port-mask ffff
5)  Configure rule 6 to deny packets with source IP 10.10.70.0/24.
Switch(config)#access-list ip 500 rule 2 deny logging disable sip 10.10.70.0 sip-mask 
255.255.255.0
6)  Bind ACL500 to port 1.
Switch(config)#access-list bind 500 interface fastEthernet 1/0/1
Switch(config)#end
Switch#copy running-config startup-config
Verify the Configurations
Verify the  IP ACL 500:
Switch#show access-list 500
rule 1  permit logging disable sip 10.10.70.0 smask 255.255.255.0 dip 10.10.80.0 dmask 
255.255.255.0
rule 2  permit logging disable sip 10.10.70.0 smask 255.255.255.0 protocol 6 d-port 80
rule 3  permit logging disable sip 10.10.70.0 smask 255.255.255.0 protocol 6 d-port 443
 rule 4  permit logging disable sip 10.10.70.0 smask 255.255.255.0 protocol 6 d-port 53
rule 5  permit logging disable sip 10.10.70.0 smask 255.255.255.0 protocol 17 d-port 53
rule 6  deny logging disable sip 10.10.70.0 smask 255.255.255.0 
Switch#show access-list bind
ACL ID        ACL NAME                  Interface/VID      Direction    Type
------           --------                           -------------           --------         ----
500             marketing                       Fa1/0/1                  Ingress       Port
Downloaded from ManualsNet.com search engine